General

  • Target
    D0WNL0AD_SETUP_FILE_(KEY_1050).zip
  • Size 27.7MB
  • Sample260424-db8e9adv2w
  • SHA256 90a273cf5b9491218ec06571300a2b341f31a1a9cc278658cacc79df8c7f06a4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • ConfuserEx .NET packer 1 IoCs

    Detects ConfuserEx .NET packer.

  • DLL Hijacking vulnerability 2 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Insecure Codesign Algorithm 3 IoCs

    File was codesigned using an insecure algorithm.

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 9 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • D0WNL0AD_SETUP_FILE_(KEY_1050).zip
    .zip 27.7MB
  • KEY_1050.docx
    .docx 13KB
  • SETUP FILE.zip
    .zip 27.7MB
  • 𝐒𝐄𝐓𝐔𝐏.zip
    .zip 27.8MB
  • IDriveExtras.dll
    .dll 57KB
  • Setup.exe
    .exe 38KB
  • Sync/AutoSync64.dll
    .dll 840KB
  • Sync/CloudDriveUtility.exe
    .exe 36KB
  • Sync/IDSyncIntIcon64.dll
    .dll 3.3MB
  • Sync/Syncexe_latest/id_sync.exe
    .exe 2.7MB
  • Sync/id_sync.exe
    .exe 2.7MB
  • Sync/jsoncpp.dll
    .dll 177KB
  • Sync/libcrypto-3.dll
    .dll 4.3MB
  • libffi-7.dll
    .dll 28KB
  • python35.dll
    .dll 9.7MB
  • sqlite3.dll
    .dll 591KB
  • translations/icephotoeditor_ar.qm
    31KB
  • translations/icephotoeditor_de.qm
    34KB
  • translations/icephotoeditor_en.qm
    32KB
  • translations/icephotoeditor_es.qm
    33KB
  • translations/icephotoeditor_fr.qm
    35KB
  • translations/icephotoeditor_it.qm
    34KB
  • translations/icephotoeditor_ja.qm
    28KB
  • translations/icephotoeditor_ko.qm
    27KB
  • translations/icephotoeditor_nb_NO.qm
    33KB
  • translations/icephotoeditor_nl.qm
    34KB
  • translations/icephotoeditor_pl.qm
    33KB
  • translations/icephotoeditor_pt.qm
    33KB
  • translations/icephotoeditor_ru.qm
    33KB
  • translations/icephotoeditor_sv.qm
    33KB
  • translations/icephotoeditor_th.qm
    33KB
  • translations/icephotoeditor_tr.qm
    33KB
  • translations/icephotoeditor_zh.qm
    25KB
  • translations/icephotoeditor_zh_TW.qm
    25KB
  • translations/styles/bin/QtCore4.dll
    .dll 1004KB
  • translations/styles/bin/QtGui4.dll
    .dll 3.8MB
  • translations/styles/bin/diskpl.exe
    .exe 712KB
  • translations/styles/bin/diskpl.exe.manifest
    .xml 625B
  • translations/styles/bin/diskpl.flx
    1KB
  • translations/styles/bin/diskpl.ico
    14KB
  • translations/styles/bin/imageformats/qgif4.dll
    .dll 28KB
  • translations/styles/bin/imageformats/qjpeg4.dll
    .dll 100KB
  • translations/styles/bin/imageformats/qmng4.dll
    .dll 188KB
  • translations/styles/bin/imageformats/qsvg4.dll
    .dll 24KB
  • translations/styles/bin/imageformats/qtiff4.dll
    .dll 244KB
  • translations/styles/bin/libmng.dll
    .dll 648KB
  • translations/styles/bin/libmon.dll
    .dll 976KB
  • translations/styles/bin/libpal.dll
    .dll 1.0MB
  • translations/styles/bin/libspg.dll
    .dll 3.1MB
  • translations/styles/bin/libspp.dll
    .dll 2.6MB
  • translations/styles/bin/sppinst.exe
    .exe 32KB
  • translations/styles/bin/sppshex.exe
    .exe 36KB
  • translations/styles/qwindowsvistastyle.dll
    .dll 140KB
  • vcruntime140.dll
    .dll 81KB
  • x64/Sync.dll
    .dll 457KB
  • x64/data/ASUSGCDriverInitialClient.exe
    .exe 295KB
  • x64/data/AsusGCGridServiceSetup.exe
    .exe 260KB
  • x64/data/EzULIB.dll
    .dll 2.1MB
  • x64/data/StartMenu/Kaspersky.lnk
    .lnk 2KB
  • x64/doc/diskpulse_manual.pdf
    .pdf 5.3MB
  • x64/libeay32.dll
    .dll 858KB
  • x64/libssl-3.dll
    .dll 1.0MB
  • x64/mfc100u.dll
    .dll 4.2MB
  • x64/mfc140u.dll
    .dll 4.9MB
  • x64/mfcm100u.dll
    .dll 78KB
  • x64/msvcp100.dll
    .dll 411KB
  • x64/msvcp140.dll
    .dll 427KB
  • x64/msvcr100.dll
    .dll 750KB
  • x64/rootcert.pem
    730B
  • x64/ssleay32.dll
    .dll 162KB
  • x64/unins000.dat
    73KB
  • x64/vcruntime140.dll
    .dll 88KB

D0WNL0AD_SETUP_FILE_(KEY_1050).zip

  • SHA256 90a273cf5b9491218ec06571300a2b341f31a1a9cc278658cacc79df8c7f06a4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
1050